https://blog.kernelstub.dev/tags/devsecops/Recent content in DevSecOps on Prepakis Georgios | Kernelstub | Security ResearcherHugoen-USWed, 12 Nov 2025 00:00:00 +0000https://blog.kernelstub.dev/posts/comparing-tfsec-and-checkov-for-hardening-infrastracture/Wed, 12 Nov 2025 00:00:00 +0000https://blog.kernelstub.dev/posts/comparing-tfsec-and-checkov-for-hardening-infrastracture/<h2 id="why-iac-hardening-matters">Why IaC Hardening Matters</h2> <p>Here&rsquo;s the thing about infrastructure as code that makes it both wonderful and terrifying: once you write a mistake into a Terraform module, that mistake doesn&rsquo;t stay put. It gets copied. A junior engineer finds your <code>s3-bucket</code> module in the internal registry, sees it&rsquo;s already &ldquo;battle tested,&rdquo; and reuses it in three more projects without reading past the variable names. If that module happened to leave logging disabled or granted a role <code>&quot;*&quot;</code> on <code>&quot;*&quot;</code>, you haven&rsquo;t made one mistake, you&rsquo;ve made a template for making that mistake forever.</p>